Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

mozilla firefox 3.0.13 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2009-2953
Mozilla Firefox 3.0.6 up to and including 3.0.13, and 3.5.x, allows remote malicious users to cause a denial of service (CPU consumption) via JavaScript code with a long string value for the hash property (aka location.hash), a related issue to CVE-2008-5715.
Mozilla Firefox 3.0.13Mozilla Firefox 3.5Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Firefox 3.0.6Mozilla Firefox 3.0.10Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.5.3Mozilla Firefox 3.5.4
NA
CVE-2009-3382
layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x prior to 3.0.15 does not properly handle first-letter frames, which allows remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitr...
Mozilla Firefox 3.0.10Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Firefox 3.0.1Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 3.0.13Mozilla Firefox 3.0.14Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9
NA
CVE-2009-3374
The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x prior to 3.0.15 and 3.5.x prior to 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows rem...
Mozilla Firefox 3.0.1Mozilla Firefox 3.0.10Mozilla Firefox 3.0.3Mozilla Firefox 3.0.2Mozilla Firefox 3.5.3Mozilla Firefox 3.0.5Mozilla Firefox 3.0.4Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.0.13Mozilla Firefox 3.0.6Mozilla Firefox 3.0.9Mozilla Firefox 3.0Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8
NA
CVE-2009-3380
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x prior to 3.0.15 and 3.5.x prior to 3.5.4 allow remote malicious users to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Mozilla Firefox 3.5.1Mozilla Firefox 3.0.13Mozilla Firefox 3.0.14Mozilla Firefox 3.0.9Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Firefox 3.0.1Mozilla Firefox 3.0.10Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 3.5.2Mozilla Firefox 3.5.3Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3
NA
CVE-2009-3370
Mozilla Firefox prior to 3.0.15, and 3.5.x prior to 3.5.4, allows remote malicious users to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.
Mozilla Firefox 3.0.1Mozilla Firefox 3.0.4Mozilla Firefox 3.0.3Mozilla Firefox 3.0.2Mozilla Firefox 3.5.3Mozilla Firefox 3.0.14Mozilla Firefox 3.0.6Mozilla Firefox 3.0.5Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.0.12Mozilla Firefox 3.0.13Mozilla Firefox 3.0.9Mozilla Firefox 3.0Mozilla Firefox 3.0.10Mozilla Firefox 3.0.11Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8
NA
CVE-2009-3375
content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x prior to 3.0.15 and 3.5.x prior to 3.5.4 allows user-assisted remote malicious users to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
Mozilla Firefox 3.0.1Mozilla Firefox 3.0.10Mozilla Firefox 3.0.3Mozilla Firefox 3.0.2Mozilla Firefox 3.5.3Mozilla Firefox 3.5Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.0.7Mozilla Firefox 3.0.8Mozilla Firefox 3.0Mozilla Firefox 3.0.5Mozilla Firefox 3.0.4Mozilla Firefox 3.5.1Mozilla Firefox 3.5.2Mozilla Firefox 3.0.13Mozilla Firefox 3.0.6Mozilla Firefox 3.0.9
NA
CVE-2009-2479
Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote malicious users to cause a denial of service (uncaught exception and application crash) via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE...
Mozilla Firefox 3.0.3Mozilla Firefox 3.0.13Mozilla Firefox 3.0.16Mozilla Firefox 3.0.9Mozilla Firefox 3.0.10Mozilla Firefox 3.0.17Mozilla Firefox 3.0.4Mozilla Firefox 3.0.12Mozilla Firefox 3.0.15Mozilla Firefox 3.5Mozilla Firefox 3.0.14Mozilla Firefox 3.0.7Mozilla Firefox 3.0.5Mozilla Firefox 3.0.2Mozilla Firefox 3.5.1Mozilla Firefox 3.0.1Mozilla Firefox 3.0.6Mozilla Firefox 3.0.11Mozilla Firefox 3.0.8
NA
CVE-2009-3988
Mozilla Firefox 3.0.x prior to 3.0.18 and 3.5.x prior to 3.5.8, and SeaMonkey prior to 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote malicious users to bypass the Same Origin Policy and conduct cross-site scripting (XSS...
Mozilla Firefox 3.0.14Mozilla Firefox 3.0.2Mozilla Firefox 3.0.15Mozilla FirefoxMozilla Firefox 3.5.6Mozilla Firefox 3.5.7Mozilla Seamonkey 2.0Mozilla Firefox 3.0Mozilla Firefox 3.0.1Mozilla Firefox 3.0.3Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5Mozilla Firefox 3.5Mozilla Firefox 3.5.1Mozilla Firefox 3.0.12Mozilla Firefox 3.0.13Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla Firefox 3.0.10Mozilla Firefox 3.0.11
NA
CVE-2010-1990
Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and previous versions, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote malicious users to cause a denial of service (excessive application launches) ...
Mozilla Firefox 3.6.2Mozilla Firefox 3.6.3Mozilla Firefox 3.6.1Mozilla Firefox 3.5.1Mozilla Firefox 3.5.6Mozilla Firefox 3.5.7Mozilla Firefox 3.5.2Mozilla Firefox 3.5.3Mozilla Firefox 3.5.4Mozilla Firefox 3.5.5Mozilla FirefoxMozilla Firefox 3.0.10Mozilla Firefox 3.0.9Mozilla Firefox 3.0.2Mozilla Firefox 3.0.1Mozilla Firefox 3.0.13Mozilla Firefox 3.0.12Mozilla Firefox 3.0.11Mozilla Firefox 3.0.4Mozilla Firefox 3.0.3Mozilla Firefox 3.0.17Mozilla Firefox 3.0.16
NA
CVE-2009-0689
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.4 and 7.2, NetBSD 5.0, OpenBSD 4.5, Mozilla Firefox 3.0.x pr...
Freebsd Freebsd 6.4Openbsd Openbsd 4.5Netbsd Netbsd 5.0Mozilla Firefox 3.0.2Mozilla Firefox 3.0.3Mozilla Firefox 3.5Mozilla Firefox 3.5.1Freebsd Freebsd 7.2Mozilla Firefox 3.0.13Mozilla Firefox 3.0.14Mozilla Firefox 3.0.8Mozilla Firefox 3.0.9Mozilla Firefox 3.0.11Mozilla Firefox 3.0.12Mozilla Firefox 3.0.6Mozilla Firefox 3.0.7K-meleon Project K-meleon 1.5.3Mozilla Seamonkey 1.1.8Mozilla Firefox 3.0.1Mozilla Firefox 3.0.10Mozilla Firefox 3.0.4Mozilla Firefox 3.0.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionfirmwareCVE-2006-4304CVE-2024-32878CVE-2024-31502XSSCVE-2024-3059CVE-2024-33692CVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook